2026-08-06August 6, 2026Latest
Recent bun updates
Section
Features
- Add Bun.XML (parse/stringify) and an .xml loader (#37048) (3171136)
- yaml: support cyclic anchors/aliases in Bun.YAML.parse (#37055) (f503e16)
Section
Fixes
- bun:sqlite: fix use-after-free closing a database with FTS5 tables (#37045) (6e6aedb)
- Fix type confusion assigning onmessage/onerror through a Proxy of globalThis (#37053) (45be4ac)
- Fix type-confused write through ReadableStream's private custom setters (#37058) (cf5ddf7)
- crypto: fix property attributes of X509Certificate validFromDate/validToDate (#37057) (d18ddfc)
- Fix zlib kMaxLength tests failing when run with other zlib tests in one process (#36992) (1438e38)
Section
Improvements
- socket: don't leave exceptions pending when a connect promise settle or TLS session/keylog dispatch fails (#37067) (b4d632a)
- terminal: apply setRawMode with TCSANOW, not TCSADRAIN, on the PTY master (#37061) (aa1e446)
- strings: route all byte search through highway, deny the paths around it (#37052) (2c5c312)
- install: do not redirect an npm: alias dependency to a same-named alias (#33835) (2e99ef1)
- watcher: stop serving the watchlist's stored fd to --hot reload reads (#37050) (b3941fc)
- fetch: don't touch the freed request clone when preconnect reuses a pooled socket (#36944) (0ffabf6)
Section
Breaking Changes
- transpiler: remove write-only ParseResult::input_fd plumbing (#37071) (7153411)
- Remove dead peechy schema scaffolding, bun-wasm, and write-only option types (#37068) (7624109)
- Remove dead code from install, event_loop, dns, mysql protocol, C++ bindings, and JS internals (#36970) (9530797)